Re: NSE: Need advice on pulling SSL cert used for TLS connection over SMTP port 25

[SM <sm () resistor net>]

At 16:21 01-10-2009, Tom Sellers wrote:
> Basically I am trying to gather information about the SSL certificate that
> is being used for a SMTP over TLS connection on port 25.  The problem is that
> the session starts out non-SSL.  Once the connection is made, and if the
> server supports it, the client issues the STARTTLS command and then a TLS
> connection is negotiated.

You'll have to establish a non-SSL session first, do an EHLO to see 
whether the server advertizes STARTTLS and then do the SSL 
negotiation using the existing session.

Regards,
-sm 


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org